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1, 2 (canceled), 

3. (previously presented) The method of Claim 17, wherein the combination is a hash function 
of a concatenation of the channel key K,. and session key 

4-6 (canceled). 

7. (previously presented) The method of Claim 17, wherein at least one of the providing acts 
is undertaken in a point-to-point communication. 

8, (previously presented) The method of Claim 17, wherein at least one of the providing acts 
is undertaken as part of a broadcast. 

9-11 (canceled). 

12. (previously presented) The method of Claim 17, comprising selectively updating the session 
key block. 

13. (original) The method of Claim 12, comprising updating the session key block by encrypting 
an updated session key with at least the encryption scheme B R 8l . 

14. (canceled). 
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15. (previously presented) The method of Claim 17, wherein the new channel key K c ' is sent in 
a message that is split 

16. (previously presented) The method of Claim 17, wherein the new channel key K c ' is refreshed 
using plural messages. 

17. (previously presented) A computer-implemented method for securely transmitting multicast 
data, comprising: 

encrypting at least one title T with at least title key K x ; and 

encrypting the tide key K T with at least one channel-unique key using at least one 
encryption function S to render a multicast data channel encrypted as S^O^), S KX (T), wherein the 
channel-unique key is the result of a combination of a channel key K c and a session key K s , 
wherein the session key K s is encrypted with at least a first encryption scheme B R sl to render a session 
key block, further comprising providing at least one player with device keys K d to activate the player 
and providing the player with the channel key K c and the session key block, wherein the player can 
determine the session key K s from the session key block using the device keys further comprising 
periodically refreshing the channel key K c to enforce subscriptions, wherein a new channel key K c ' 
is encrypted with at least a second encryption scheme B 1 *^ and wherein the encryption scheme B R & 
includes: 

assigning each player in a group of players respective private information I u ; 
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partitioning players not in a revoked set R into disjoint subsets ^....S^ having associated 
subset keys 1^,...!^; and 

encrypting the session key K s with the subset keys L^...,!^ to render rn encrypted versions 
of the session key K s . 

18. (original) The method of Claim 17, wherein the encryption scheme B*^ further includes 
partitioning the players into groups S 1 ,... J> S W , wherein "w" is an integer, and the groups establish 
subtrees in a tree. 

19. (original) The method of Claim 1 8, wherein the tree includes a root and plural nodes, each node 
having at least one associated label, and wherein each subset includes all leaves in a subtree rooted at some 
node Vj that are not in the subtree rooted at some other node Vj that descends from v t . 

20. (original) The method of Claim 19, wherein the revoked set R defines a spanning tree, and 
wherein the method includes: 

initializing a cover tree T as the spanning tree; 

iteratively removing nodes from the cover tree T and adding nodes to a cover until the cover 
tree T has at most one node. 
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21. (original) The method of Claim 19, wherein each node has at least one label possibly induced 
by at least one of its ancestors, and wherein each player is assigned labels from all nodes hanging from a 
direct path between the player and the root but not from nodes in the direct path, 

22. (original) The method of Claim 2 1, wherein labels are assigned to subsets using a pseudorandom 
sequence generator, and the act of decrypting includes evaluating the pseudorandom sequence generator. 

23-48 (canceled). 
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